Lucene search
+L

26850 matches found

Github Security Blog
Github Security Blog
•added 2026/10/19 3:36 p.m.•5 views

Malware in do-wnload-available-the-white-stripes-1-yywrn-pvfqxa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_root
osv_root
•added 2026/10/19 1:26 p.m.•45 views

ROOT-APP-NPM-CVE-2026-9679 CVE-2026-9679 in undici - Patched by Root

Root has patched CVE-2026-9679 in the undici package for Root:npm. Multiple fixed versions available...

5.9CVSS6.1AI score0.00332EPSS
SaveExploits0
osv_root
osv_root
•added 2026/10/19 1:20 p.m.•26 views

ROOT-APP-NPM-GHSA-WQVQ-JVPQ-H66F GHSA-wqvq-jvpq-h66f in nodemailer - Patched by Root

Root has patched GHSA-wqvq-jvpq-h66f in the nodemailer package for Root:npm. Multiple fixed versions available...

5.5AI score
SaveExploits0
osv_root
osv_root
•added 2026/10/19 1:20 p.m.•33 views

ROOT-APP-NPM-GHSA-VVJJ-XCJG-GR5G GHSA-vvjj-xcjg-gr5g in nodemailer - Patched by Root

Root has patched GHSA-vvjj-xcjg-gr5g in the nodemailer package for Root:npm. Multiple fixed versions available...

4.9CVSS5.5AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/19 1:12 p.m.•21 views

CVE-2020-2555

EXP test...

9.8CVSS8.7AI score0.97116EPSS
SaveExploits26
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between th...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•5 views

Malicious Package

Overview do-wnload-available-f2oap-wvzhe9 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview do-wnload-available-provincial-q7d0i-muzxoj is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview down-load-available-zip-now-265533-the-safeway-elhem-xoyofv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview do-wnload-available-2013-5195-ripley-pine-zoryg-cyvlnz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview do-wnload-available-the-white-stripes-1-yywrn-pvfqxa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between tha...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•4 views

Malicious Package

Overview do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection betwe...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•2 views

Malicious Package

Overview down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/10/19 12:24 p.m.•4 views

Malicious Package

Overview do-wnload-available-2016-44937-in-the-magic-hour-xgzaj-txvlft is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

9.8CVSS5.9AI score
SaveExploits0References2
osv_root
osv_root
•added 2026/10/19 12:16 p.m.•40 views

ROOT-APP-NPM-CVE-2026-44240 CVE-2026-44240 in basic-ftp - Patched by Root

Root has patched CVE-2026-44240 in the basic-ftp package for Root:npm. Multiple fixed versions available...

7.5CVSS7.4AI score0.00542EPSS
SaveExploits0
osv_root
osv_root
•added 2026/10/19 11:51 a.m.•29 views

ROOT-APP-NPM-CVE-2024-28863 CVE-2024-28863 in tar - Patched by Root

Root has patched CVE-2024-28863 in the tar package for Root:npm. Multiple fixed versions available...

6.5CVSS6.1AI score0.00929EPSS
SaveExploits1
osv_root
osv_root
•added 2026/10/19 10:19 a.m.•19 views

ROOT-OS-DEBIAN-11-CVE-2026-32776 CVE-2026-32776 in expat - Patched by Root

Root has patched CVE-2026-32776 in the expat package for Root:Debian:11. Multiple fixed versions available...

5.5CVSS6.2AI score0.00167EPSS
SaveExploits0
Rows per page
Query Builder